Merge pull request WP-API#32 from trevordevore:support-blogs-not-at-root-domain

Author: sblaz

lib/class-wp-json-authentication-oauth1.php

@@ -551,7 +551,13 @@ protected function check_oauth_signature( $consumer, $oauth_params, $token = nul
 
 		$params = array_merge( $params, $oauth_params );
 
-		$base_request_uri = rawurlencode( get_home_url( null, parse_url( $_SERVER['REQUEST_URI'], PHP_URL_PATH ) ) );
+		// Support WP blog roots that point to a folder and not just a domain
+		$home_url_path = parse_url(get_home_url (null,''), PHP_URL_PATH );
+		$request_uri_path = parse_url( $_SERVER['REQUEST_URI'], PHP_URL_PATH );
+		if (substr($request_uri_path, 0, strlen($home_url_path)) == $home_url_path) {
+			$request_uri_path = substr($request_uri_path, strlen($home_url_path));
+		}
+		$base_request_uri = rawurlencode( get_home_url( null, $request_uri_path ) );
 
 		// get the signature provided by the consumer and remove it from the parameters prior to checking the signature
 		$consumer_signature = rawurldecode( $params['oauth_signature'] );